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(54) Authentication between servers 

(57) A user (10) accessing resources on the Internet 
is often required to change senders (40A,40B) whilst In 
the middle of what for the user is a single task. For ex- 
ample, the user may have accessed a multi-homed da- 
tabase or may have browsed a catalog on one sen/er 
(40A) and now needs to go to another (40B) to make 
payment. As many Internet resources require user au- 
thentication, the process of changing sen/ers frequently 
results in the user having to re-authenticate himself/her- 
self. To overcome this problem the present invention 



provides that a server (40A) wishing to direct a user (10) 
to another server (408) does so by returning ([2]) a URI 
that has been signed by the first serve r by including a 
signature in the URL The user (1 0) uses this signed URL 
to access ([3]) the second server (40B). The second 
server (408) can then use the signature contained in the 
URL to confirm that the user (1 0) has come from the first 
server (40A) and therefore does not need to be re-au- 
thenticated. Infomnation can also be included in the URI • 
and the signature used at the second server (408) to 
check its integrity. 
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Description 

Fieid of the invention 

[0001] The present invention relates to authentication 
between sen/ers visited by the same agent such as a 
browser or server-side program. 

Bacicground of the invention 

[0002] The World Wide Web operating over the Inte- 
met and its intranet equivalents use the HTTP protocol 
for communicating agents (browsers) with servers. Fig- 
ure 1 shows the basic request /response messaging 
mechanism. More particulary, a browser 10 communi- 
cates with a server 11 by sending HTTP Requests 12 
and receiving back HTTP Responses 1 3. A Request 1 2 
is made up of a Request Line, a Request Header, a CR 
LF, and a message body (the latter being optional). A 
Response is made up of a Status Line, a Response 
Header, a CR LF, and a message body (again optional). 
[0003] When the browser wants to access a particular 
page held on the server 11 , it sends a Request 12 with 
the identity of the desired page being given In the Re- 
quest Line; the server will then return the requested 
page in the message body of a Response 13. Where 
the browser 10 wants to query a database that has a 
web interface, it will send a Request to the interface, 
identifying the interface in the request Line (this line may 
also hold the query data); again the server will return the 
requested information in a Response 1 3. 
[0004] As shown in Figure 1 , the Request Line 14 of 
a Request 12 has three elements, namely a Request 
Method, a URI (Uniform Resource Identifier), and a Pro- 
tocol Version. The URI 15 is usually composed of an 
http.URL 1 6 that identifies the resource to be accessed, 
and, optionally, a query 17 which if present is separated 
from the http_URL by a "?". In the Figure 1 example, the 
components of the UR1 15 have the following values: 

http_URL = http://www.apatentsen/er.com/cgi-bin/ 
query 

query = country=us&owner=johnsmithco 

[0005] In this example, the browser is malcing a re- 
quest to a patent database to return information on any 
patent matching the query parameters - in this case, two 
conditions have been set, namely that the patent is for 
the US ("country=us") and that the patent owner is called 
JohmSmithCo ("owner=johnsmithco''). The two condi- 
tions are separated by an in the query. 
[0006] Figure 2 illustrates an application of the "cook- 
ie" mechanism that is widely used across the Web. A 
■cookie"is a piece of information sent by a Web sen/er 
to a Web browser that the browser software is expected 
to save and to send back to the server whenever the 
browser makes additional requests to the server Cook- 
ies contain information such as login or registration in- 



formation, online "shopping cart" information, user pref- 
erences, and the like. When a server receives a request 
from a browser that includes a cookie, the server is able 
to use the information stored in the cookie. In the Figure 

s 2 scenario, the sen/er 11 uses cookies to avoid a user 
having to re-authenticate himself/herself each time the 
server is visited. More particularly, the server runs an 
authentication process 20 Including a check task 21 that 
checks each incoming Request [1] intended for a par- 

10 ticular resource 25 to see if the Request carries a cookie 
(in the Request header) that has been previously set by 
the sen/er 11 and is still valid, if this is the case, the Re- 
quest is allowed to proceed [5]; othenA^ise the request is 
routed to a sign-on task 22 that returns [2] a sign-on form 

IS to the user at browser 1 0. The user completes this form 
(generally, user ID and pasword) and sends it back [3] 
to the sign-on task 22 which checks the input data. If the 
data checks out, a set-cookie task 23 returns [4] a first 
page of the requested resource in a Response that in- 

20 eludes a "set cookie" command with an associated ses- 
sion user-code. The cookie is stored by the browser 10 
and included in subsequent Requests [5] to the resource 
25; the check task 21 allows such requests through with- 
out invoking the sign on program (the check task has 

2S access to the session user-codes assigned by the set- 
cookie task). 

[0007] Figure 3 illustrates the situation of a user ac- 
cessing a multi-homed resource that is split across two 
servers 1 1 A and 1 1 B (sen/ers A and B). To minimise the 

30 inconvenience of sucha split, the HTTP redirection 
mechanism may be used by which if server A receives 
a request for a resource page that has been moved to 
server B, it will cause the browser 10 to automaticaly go 
to server B. Server A acieves this by returning a Re- 

3S sponse that includesa redirection status code in the sta- 
tus line of the Response, and the target URI in a location 
field of the response header. 
[0008] Adifficulty arises, however, when access to the 
desired resource is protected by a user-authenticaton 

40 process, this process being run on both server A and 
server B (as respective authentication processes 20A 
and 20B). Whilst cookies can be used to automatically 
authenticate users across two or more servers, this 
mechanism only works if the sen/ers are in the same 

4S network domain. In the Figure 3 example, the servers 
1 1 A and 1 1 B are in different domains so that the cookie 
mechanism cannot be used. As a result, when a user 
who has signed on at server A in order to access part 
of a multi-homed resource, wants to access a part of 

so this resource that resides on sen/er B, the user must 
sign on again at sen/er B. 

[0009] It may also be noted that even if sen/ers A and 
b were in the same domain, the use of a cookie as a 
mechanism for avoiding the need to re-autnticate a user 
ss switching between servers, i far from ideal as users have 
the ability to turn of this feature of their browsers so its 
presence cannot be assumed. 
[0010] It is an object of the present invention to pro- 
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vide a convenient authentication mechanism spanning 
two servers visited by the same agent. 

Summary of the Invention 

[0011] According to the present invention, there is 
provided an authentication method between first and 
second sen/ers visited by the same agent, wherein: 

- following access by the agent to the first sen/er, the 
latter directs the agent to the second server by re- 
turning to the agent a URI that points to the second 
server, the URI including a signature adapted to 
guarentee that at least the signature of the URI orig- 
inates from a server belonging to a qualified set of 
sen/ers that has at least said one server as a mem- 
ber, 

- the agent uses the URI returned by the first server 
to access the second serwer with a request includ- 
ing that URI, and 

-- on receiving the request including said URI with its 
signature, the second server uses the received sig- 
nature to check that at least the signature originates 
from within said qualified set of servers. 

[0012] In one embodiment, the first sen/er directs the 
agent to the second server by a redirection control code 
returned with the URI of the second sen/er, the agent 
responding to the redirection control code to automati- 
cal ly generate and send said request to the second send- 
er. In another embodiment, the first server directs the 
agent to the second server by returning a page for dis- 
play that includes a hyperlink which when activated 
causes the agent to generate said request. 
[0013] The signature will generally be formed from da- 
ta consisting of one or more elements each either in- 
cluded in the URI or already known to the second server. 
Advantageously, one element is a predetermined por- 
tion of the URI and the signature is adapted to guarentee 
the integrity of that predetermined portion and its origi- 
nation from within the qualified set of servers; in this 
case, the second sen/er can use the received signature 
to check the integrity of the predetermined portion of the 
received URI and its origination from within the qualified 
set of servers. 

[0014] In one embodiment the first and second sen/- 
ers share a common secret which is not included in the 
URI but forms one element of the data used by the first 
server for generating the signature; the signature being 
generated at the first server by a process involving 
processing the data with a one-way function; and the 
second server carrying out its signature-based checking 
by: 

(i) " carrying out the same process as used by the 
first server when generating the signature, on data 
that consists of the same one or more elements as 
used in generating the signature, these one or more 



elements being available at the second server ei- 
ther in the received URI or as already known, and 
(ii) - comparing the result obtained in step (i) with 
the received signature. 

5 

[0015] In another embodiment, the first sen/er holds 
the private key of a private-key/public key pair and sec- 
ond sen/er knows the public key of this pair; the signa- 
ture being generated by the first sen/er by a process in- 
10 voK/ing processing said data with a one-way function, 
and encrypting the result with its private key; and the 
second sen/er carrying out its signature-based checking 
by: 

IS (i) carrying out the same one-way function as 
used by the first sen/er in generating the signature, 
on data that consists of the same one or more ele- 
ments as used in generating the signature, these 
one or more elements being available at the second 
20 sen/er either in the received URI or as already 
known, 

(ii) - decrypting the received signature using the 
public key, and 

(ill) - comparing the decrypted signature obtained 
2S In step (ii) with the result obtained in step (i). 

[0016] One application of the method is to provide a 
"single sign-on" capability to a multi-homed site where 
access to the individual sen/ers of the site (the first and 

30 second sen/ers) is restricted by respective user authen- 
tication processes. In this application, the user authen- 
tication process of the second sen/er is satisfied by a 
agent accessing the second sen/er by a request includ- 
ing said URI with its signature where the signature con- 

35 firms its origination at the first sen/er. 

[0017] Where the signature is generated using data 
forming a predetermined portion of the URI, the method 
can b eused in a number of applications all involving the 
authentication of infomnation passed from the first serv- 

40 er to the second In the signed URI . In these applications, 
the second sen/er only acts upon information present in 
the predetermined portion of the received URI after 
checking that the received signature confirms the integ- 
rity of said predetermined portion and its origination at 

45 the first sen/er. The transferred information may com- 
prise identification information relating to the agent. 
[001 8] The transferred information may additionally or 
alternatively comprise transactional information relating 
to a transaction being conducted by the agent, the trans- 

so action Involving a first part with the first sen/er and a 
second part with the second sen/er with the second part 
using the transactional information transferred from the 
first server. 



[0019] Embodiments of the invention will now be de- 
scribed, by way of non-limiting example, with reference 



55 Brief Description of the Drawings 
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to the accompanying diagrammatic drawings, in which: 

Figure 1 is a diagram illustrating the exchange of 
HTTP requests and responses between a browser 
and server; 

Figure 2 is a diagram illustrating a user-authentica- 
tion process using cookies to facilitate subsequent 
accesses during the same session; 
Figure 3 is a diagram illustrating the access of a 
browser to a multi-homed site; 
Figure 4 is a diagram illustrating the use of a signed 
URL in accordance with the present invention; 
Figure 5 is a diagram showing a preferred format 
of the signed URL used in Figure 4; 
Figure 6 is a diagram illustrating a first method of 
forming a signed URL and subsequently using it to 
effect integrity and origination checks; and 
Figure 7 is a diagram illustrating a second method 
of forming a signed URL and subsequently using it 
to effect Integrity and origination checks. 

Best Mode of Carrying Out the Invention 

[0020] Figure 4 illustrates the basics of the present 
inventfon and shows a user agent (browser) 10 which 
can communicate using the HTTP protocol with first and 
second HTTP senders 40A and 40B (referred to below 
as Surlserver A and Surlserver B where "Surrstands for 
"Signed URL" for reasons which will become apparent 
below). For simplicity it will be assumed that Surlservers 
A and B each only host one site. 
[0021] Assume that browser 10 has sent [1] a Re- 
quest to Surlserver B (that is. to a resource of the hosted 
site). For whatever reason (and illustrative reasons are 
given below), Surlsen^er A determines that the browser 
1 0 should be directed to Surisen^er B to service the Re- 
quest. Surlserver A therefore returns [2] a Response in- 
cluding the URI of a target resource on Surlserver B. 
This URI includes, as normal, the http_url of the target 
resource and any query data contained in the original 
Request that it may be appropriate to transfer. However, 
in addition, the URI has further data appended in query 
format. The contents of this further data will depend on 
surrounding circumstances but will always include a sig- 
nature formed by processing a predetemnined portion of 
the URI. This predetermined portion may be all or part 
of the URI excluding the signature itself. Two ways of 
forming the signature will be described below with re- 
spect to Figures 6 and 7; what is important is that the 
signature is formed in a way enabling it to be used to 
check the integrity of the aforesaid predetermined por- 
tion of the URI and its origination from the Surlserver A 
(or, in certain cases, from a larger set of Surlservers that 
have some common quality of interest to the Surlserver 
B). 

[0022] The URI including the signature forms what is 
termed herein as a "signed URL". Process 41 run by 
Surlserver A is responsible for forming the signed URL 



and including it in a Response returned to browser for 
directing the latter to Surlserver B. 
[0023] How the signed URL is included in the Re- 
sponse will depend on how the browser is to be directed 

5 to Surlserver B. If the redirection capability of the HTTP 
protocol is used, then the signed URL is included in the 
location field of the response header and the status line 
includes the appropriate redirection status code. In this 
case, browser 10 on receiving the Response from Sur- 

10 Iserver A will automatically send [3] a Request to Sur- 
lserver B using the signed URL from the Response as 
the URI in the request line of the Request. Alternatively, 
Surlserver A can include the signed URL in a hyperlink 
contained in a page returned to browser 10 in the mes- 

15 sage body of the Response. In this case, when a user 
activates the hyperlink, the browser sends [3] a Request 
to Surlsen/er B, again with the signed URL as the URI 
in the request line of the Request. 
[0024] On receiving such a request from the browser 

20 10, a process 42 run on Surlserver B extracts the sig- 
nature and uses it to check the origin and integrity of the 
aforesaid predetermined portion of the URI . The Sur- 
lsen/er B then returns [4] a Response to browser 10, the 
nature of this Response depending on the outcome of 

25 the check carried out by process 41 . 

[0025] This general "signed URL" mechanism can be 
put to use in a number of ways as will be exampled be- 
low. However, before doing so, a preferred format for a 
signed URL will be described with reference to Figure 

30 5. More particularly, as well as the http^url of the desti- 
nation server (Surlserver B in Figure 4), the signed URL 
of Figure 5 include s a query made up of a number of 
parameter nameA^alue pairs the last one of which is the 
signature itself (SignedUrl= < Signature > ). The first 

35 nine name/value pairs contain data about the user/user 
agent that generated the initial Request, the server gen- 
erating the signed URL, and their interaction. A brief ex- 
planation of each of these first nine parameters is given 
below: 

40 

User : a string representing the user 

Serverld : a string repesenting the sender ef- 

fecting re-direction (that is, Surlsen/- 
er A in Figure 4) 
^ Transaction: current transaction between user 
agent and server (SurlserverA) 

Session : current session between user agent 

and sen/er (Surlsen/er A) 

SourceHost : host name of server effecting re-di- 
so rection (Surlserver A) 

SourceURL : the URI trigerring the re-direction 

ServerTime : GMT time at server effecting re-di- 
rection (Surlsen/erA) 

AuthTime : time of generation of signed URL 
55 Hash : identifier of hash function used in 

generating signature. 

[0026] Finally, the penultimate parameter name/value 
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pair (Custom= <CustomField>) is optional and contains 
any relevant query data received in the Request being 
re-directed. 

[0027] For tlie Figure 5 signed URL, tlie signature is 
formed by processing all elements other than the final 
name/value pair. 

[0028] Two applications of the general mechanism il- 
lustrated in Figure 4 will now be described with refer- 
ence to the interactions [1] to [4] shown in that Figure. 

Single Sign-On (Basic) 

[0029] I n Figure 4 Surlsen^ers A and B host respective 
sites; assume now that both sites have restricted access 
provided by respective user authentication processes at 
the Surlsen/ers A and B. However, the Surlsen/er B site 
is willing to accept anyone authenticated for the Sur- 
Iserver A site without requiring them to undergo re-au- 
thentication. Consider a user who has already success- 
fully gone through the sign on process at Surlserver. 
Surlserver A thereafter uses a cookie to facilitate further 
accesses by the user for browsing the site. If now the 
user wants to go to the Surlsen/er B site (for example, 
to complete a transaction started on Surisen/er A), the 
Surlserver A site gives the user the opportunity to do so 
by presenting the user with a page including a link "Go 
to resource B" which points to a page "goJo.serverB. 
htmr on Surlserver A. Upon the user activating the link 
the following actions occur: 

[1] - a Request is sent for "go_to_sen/erB.html" on 
Surlsen/erA; 

[2] - Surlsen/er A has been configured to redirect 
every request to "goJo.serverB.html" to check 
process 42 on Surlsen/er B. this process being at 
http_url: 

http://www.Surlsen/erB.com/cgi.bin/checkB. 
To do this, process 41 of Surlsen/er A forms a 
signed URL in the Figure 5 format and retums a Re- 
sponse with the signed URL in the location field of 
the response header and a redirection status code 
set in the status line of the Response. 
[3] - Browser 10 on receiving the Response sends 
a Request to Surlserver B with the signed URL as 
the URI in the request line. Surlsen/er B is config- 
ured to submit every Request directed to cgi.bin/ 
checkB to the process 42. If this process indicates 
that the signed URL in the Request comes from Sur- 
lserver A then the Surlsen/er B site knows it can 
trust the user agent 1 0 (Surlsen/er A having already 
carried out user authentication). As a result, the us- 
er is not asked to sign on again in order to access 
the site hosted on Surlserver B. 
[4] - When the signed URL has been successfully 
checked, Surlsen/er B retums a Response to 
browser 10 using this response to set a cookie for 
subsequent accesses by browser 10. 



Signed Information 

[0030] The site hosted on Surlserver B may not in fact 
care who is accessing it - instead, this site may care 

5 much more about receiving valid information from the 
site on Surlsen/er A, typically about a transaction involv- 
ing the user. Again the general signed-URL mechanism 
of Figure 4 is well suited to giving the reassurance 
sought by the site on Surlsen/er B. Consider a scenario 

10 in which Surlsen/er A hosts the web site of a merchant 
featuring e-commerce for software products. This site 
has a catalog and on-line purchasing but the software 
supplier company does license management through its 
site on Surlserver B. Once the customer (user of brows- 
er 10) has bought the software he/she wants, the cus- 
tomer needs to be sent to the supplier's site. Thus: 

[1] - Customer has just bought a software product 
at the merchant's site on Surlsen/er A and has re- 
20 ceived back a page with all the order data (for ex- 
ample, order number: 8928QW8) and an instruction 
to follow a hyperlink to retrieve the license number. 
This hyperlink has URI : 

http://www.Surlsen/erA.com/Get_license. 
2S html?Order = 8928QW8 The customer activates 
this link to send a Request to Surlsen/er with the 
above URI in the request line. 
[2] - Surlsen/er A has been configured to redirect 
every request to "Get Jicense.html" to a process 42 
30 on Surlsen/er B at http_url: 

http://www.Surlsen/erB.com/cgi.bin/ 
Generate.License To do this, process 41 of Sur- 
lserver A forms a signed URL in the Figure 5 format 
with the order number from the Request query now 
35 placed in the CustomField. Surlsen/er A then re- 
turns a Response with the signed URL in the loca- 
tion field of the response header and a redirection 
status code set in the status line of the Response. 
[3] - Browser 10 on receiving the Response sends 
40 a Request to Surlserver B with the signed URL as 
the URI in the request line. Surlsen/er B is config- 
ured to submit every Request directed to cgi.bin/ 
Generate_License to the process 42. This process 
involves checking that the contents of the signed 
4S URL against its signature to ensure the integrity of 
the data carried by signed URL and its origination 
at Surlserver A.. 

[4] - When the signed URL has been successfully 
checked, Surlsen/er B returns a Response to 
so browser 10 with an html page including the license 
number for the customer. 

[0031] In fact, the single sign-on process described 
above will generally also involve using signed informa- 
ss tion passed from Surlsen/er A to Surlsen/er B. Indeed, 
as described above, the single sign-on process did pass 
signed information because it used the Figure 5 signed- 
URL format which, as already described, includes mul- 
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tiple parameter name/value pairs. However, the use of 
this information was not referred to; in practice informa- 
tion such as AuthTime will be used by Surlserver B dur- 
ing a single sign-on check. In particular, AuthTime will 
be used to check whether the validity of the signed URL 
has time expired, that is, whether or not the last user 
authentk;ation was too long ago to still be considered 
valid; the integrity of the AuthTime needs to be authen- 
ticated because it would be an easy matter for a user to 
change this parameter. 

[0032] A more sophisticated form of single sign-on 
may be implemented in which Surlserver B does not au- 
tomatically accept a user because the user has been 
passed to it from Surlserver A but, instead, Surlserver 
B carries out its own user authentication based on user 
data passed to it from Surlserver A In a signed URL. In 
this case, Surlserver is trusting the integrity of data 
passed to it by Surlsen/er B but is making its own judge- 
ments based on that data. 

Signature Generation 

[0033] Figure 6 illustrates a first method of signature 
generation and checking. In this method, the generation 
and checking processes (carried out by Surisen/ers A 
and B respectively in Figure 4) share a common secret 
K. Signature generation involves combining the http-url 
and query (data) parts 50 of the planned URI (excluding 
the signature) together with the common secret K and 
subjecting them to a one-way function such as a one- 
way hash function 52 (for example, MD5 or SHA1 ) to 
produce a signature S. This signature is added (54) to 
the rest of the URi and sent as the signed URL. Check- 
ing the signed URL on receipt involves decomposing 
(55) the received signed URL into the received signature 
SS and the remainder 57 of the signed URL (which 
should correspond to part 50). This remainder is com- 
bined with the common secret K and the result is then 
subject to the same one-way function 52 as used upon 
signature generation to produce a regenerated signa- 
ture SSS. The regenerated signature SSS is compared 
(58) with the received signature SS and if they match, 
the signed URL is taken as coming from the entity known 
to have the common secret K (or from within a group of 
such entities where multiple entities have the same key); 
the integrity of the remainder 57 is also taken as proven. 
[0034] Figure 7 illustrates a second method of signa- 
ture generation and checking. In this method, the gen- 
erating entity (Surlsen/er A In Figure 4) holds the private 
key K^priv of a private/public key pair (for example, for 
the RSA encryption algorithm) whilst the checking entity 
(Surlserver B) knows the public key K^pub- Signature 
generation involves combining the http-url and query 
(data) parts 50 of the planned URI (excluding the signa- 
ture) and subjecting them to a one-way function such as 
a one-way hash function 52 (for example, MD5 or 
SHA1 ). The result of this process is encrypted (60) using 
the private key K^priv to produce a signature S that is 



then added (54) to the rest of the URI and sent as the 
signed URL Checking the signed URL on receipt in- 
volves decomposing (55) the received signed URL into 
the received signature SS and the remainder 57 of the 

5 signed URL (which should correspond to part 50). This 
remainder is subject to the same one-way function 52 
as used upon signature generation and the result com- 
pared (66) with the received signature after the latter 
has been decrypted using the public key K^^pub- 1^ a 

10 match Is achieved, the signed URL is taken as coming 
from the entity known to have the private key Ky^^^ (or 
from within a group of such entities where multiple en- 
tities have the same key); the Integrity of the remainder 
57 is also taken as proven. 

75 

Variants 

[0035] It will be appreciated that many variants are 
possible to the above-described embodiments of the 

present invention. 

[0036] For example, if the receiving Surlserver B is 
only interested in knowing whether the agent has been 
directed to it from Surlsen/erA, then all that is needed Is 
for Surlserver B to be able to confirm that the signature 
of the received URI originates from Surlserve r A. Indeed 
this is what is happening in the "Single Sign-On (Basic) 
' process described above. This basic functionality can 
in fact be achieved even without there being a need for 
the data used to generate the signature being precisely 
known to both senders. More particularly the signature 
can be formed by simply having Surlsen/er A encrypt a 
data element with its private key (without prior applica- 
tion of a one-way hash function), Surlsen/er B then de- 
crypting the signature with its public key All Surlserver 
B needs to know about the data element used to form 
the signature is some discernible characteristic that dis- 
tinguishes the decrypted data in some way For exam- 
ple, if the data element is a time stamp then Surlserver 
B need only know this fact without having any idea of 
the time value concerned - this is because It remains 
improbable that anyone not knowing the private key 
could generate anything looking tike a timestamp when 
decrypted by the public key of Surlsen/er A. 
[0037] In order to make it possible to protect against 
replay attacks, each signature fomned (In whatever 
manner) by Surlserver A preferably includes a compo- 
nent that is different each time the signature is formed 
(though it will be understood that there will generally be 
a limited range of possible values of this component so 
that for practical embodiments using, for example, a 
timestamp or pseudo-random-binary-sequence as the 
varying component, there will be a theoretical chance of 
two signatures being identical). 
[0038] As already indicated, Surlsen/er B may not ac- 
tually be interested in knowing that the signed URL orig- 
inates from a particular server but, rather, that it comes 
from a sen/er within a qualified set of Surlsen/ers. This 
can be readily achieved by giving the same common se- 
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cret / private key to all servers of this set (depending on 
whetlierthe Figure 6 or Figure 7 signature generation 
method is used). 

[0039] Furthermore, although the inventbn has been 
described above In relation to a user agent (browser 1 0) 
interacting with Surlsen/ers, the invention is usable with 
other agents such as a sen/er-side CGI program. 
[0040] Further security (and in particular, confidenti- 
ality) can be provided by using SSL for the exchanges 
between the user 10 and the Surlservers A and B. 



Claims 

1 . An authentication method between first and second 
servers visited by the same agent, wherein: 

-- following access by the agent to the first server, 
the latter directs the agent to the second server 
by returning to the agent a URI that points to 
the second server, the URI including a signa- 
ture adapted to guarentee that at least the sig- 
nature of the URI originates from a server be- 
longing to a qualified set of servers that has at 
least said one server as a member, 
the agent uses the URI returned by the first 
sen/er to access the second server with a re- 
quest including that URI, and 

- on receiving the request including said URI with 
its signature, the second server uses the re- 
ceived signature to check that at least the sig- 
nature originates from within said qualified set 
of servers. 

2. A method according to claim 1 , wherein the first 
server directs the agent to the second server by a 
redirection control code returned with the URI of the 
second sen/er, the agent responding to the redirec- 
tion control code to automatically generate and 
send said request to the second server. 

3. A method according to claim 1, wherein the first 
server directs the agent to the second sen/er by re- 
turning a page for display that includes a hyperlink 
which when activated causes the agent to generate 
said request. 

4. A method according to claim 1 , wherein the signa- 
ture is formed from data consisting of one or more 
elements each either included in the URI or already 
known to the second sen/er. 

5. A method according to claim 1 , wherein one said 
element of the data used for fomiing the signature 
is a predetermined portion of the URI, the signature 
being adapted to guarentee the integrity of that pre- 
determined portion and its origination from within 
said qualified set of servers; the second sen/er us- 



ing the received signature to check the integrity of 
said predetermined portion of the received URI and 
its origination from within said qualified set of sen/- 
ers. 

5 

6. A method according to claim 4 or claim 5, wherein 
the first and second sen/ers share a common secret 
which is not included in said URI but forms one said 
element of the data used by the first server for gen- 

10 erating the signature; the signature being generat- 
ed at the first server by a process involving process- 
ing the data with a one-way function; and the sec- 
ond sen/er carrying out its signature-based check- 
ing by: 

IS 

(i) - carrying out the same process as used by 
the first server when generating the signature, 
on data that consists of the same one or more 
elements as used in generating the signature, 

20 these one or more elements being available at 

the second server either in the received URI or 
as already known, and 

(ii) - comparing the result obtained in step (i) 
with the received signature. 

25 

7. A method according to claim 4 or claim 5, wherein 
the first sen/er holds the private key of a private- 
key/public key pair and second server knows the 
public key of this pair; said signature being gener- 

30 ated by the first sen/er by a process involving 
processing said data with a one-way function, and 
encrypting the result with said private key; and the 
second sen/er carrying out its signature-based 
checking by: 

35 

(i) - carrying out the same one-way function as 
used by the first sen/er in generating the signa- 
ture, on data that consists of the same one or 
more elements as used in generating the sig- 

40 nature, these one or more elements being 

available at the second server either in the re- 
ceived URI or as already known, 

(ii) - decrypting the received signature using 
the public key, and 

45 (jjj) - comparing the decrypted signature ob- 

tained In step (ii) with the result obtained in step 
(i). 

8. A method according to claim 1, wherein the first 
so sen/er holds the private key of a private-key/public 

key pair and second server knows the public key of 
this pair; said signature being generated at the first 
sen/er by encrypting with said private key a data el- 
ement that is not included in uncrypted form in the 
ss URI but at least characteristics of which are known 
to the second sen/er; and the second sen/er carry- 
ing out Its signature-based checking by: 
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(i) decrypting the received signature using 
the public l^ey. and 

(ii) - comparing the decrypted form of said data 
element obtained in step (i) with the what is 
knovm by the second server about this element, s 



16. A method according to any one of the preceding 
claims, wherein the agent communicates with the 
the first and second servers using an encrypted 
messaging scheme. 



9. A method according to any one of claims 4 to 6, 
wherein the signature is formed from data that has 
a component that is different each time the signa- 
ture is generated. io 



10. A method according to any one of the preceding 
claims, wherein access to the first and second serv- 
ers is restricted by respective user authentication 
processes, the user authentication process of the is 
second sen/er being satisfied by a agent accessing 

the second server by a said request including said 
URI where the signature-based checking carried 
out by the second server using the signature con- 
taining in the URI confimns that at least said signa- 20 
ture originates at said first server. 

1 1 . A method according to claim 5 or any claim depend- 
ent thereon, in which the first server passes infor- 
mation to the second sen/er in said predetermined 2S 
portion of the URI and the second sen/er only acts 
upon this Information as present in the predeter- 
mined portion of the received URI after checking 
that the received signature confirms the integrity of 
said predetermined portion and its origination at 30 
said first sen/er. 



12. A method according to claim 11 , wherein access to 
the second server is restricted by a user authenti- 
cation process and said information includes iden- 35 
tification Infomnation relating to the agent which the 
authentication process uses, after its integrity has 
been checked, to determined if the agent is to be 
allowed access to the second sen/er. 

40 

1 3. A method according to claim 1 1 , wherein said infor- 
mation includes transactional information relating to 
a transaction being conducting by the agent, this 
transaction involving a first part with said first server 
and a second part with said second sen/er with the 4S 
second part using said transactional Information in- 
cluded in said predetermined portion by the first 
server. 



14. A method according to claim 5 or any claim depend- so 
ent thereon, wherein said predetermined portion of 
the URI is the whole URI other than said signature. 



1 5. A method according to claim 5 or any claim depend- 
ent thereon, wherein said predetermined portion of ss 
the URI includes a timestamp, the second sen/er 
using the timestamp in checking whether the signif- 
icance of the received URI has time expired. 
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Fig. S 

SIGNED URL FORMAT: 

<Destination URL>?User=<User Id>&ServerId»<OrigiiiateServerId>& 

Traiiisaction=<TransactionId>&Session=<SessioiiId>& 

SoiirceHost»cOriginateProtocol>://<OrigiiiateHostName>:<OriginatePort>& 

SourceURL^OriginateURL>&ServerTime=<ServerTime(GMT)>& 

AuthTinie=<LastAuthenticatioiiTiine>&Ciistom=<CustoiiiField>& 

Hash'=<HashType>&SignedUrl=<Sigiiatiire> 
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